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, =1 Cross-Reference to Related Applications 

TO Embodiments of the present invention claim priority from Provisional 

;ff Application Serial No. 60/152,785, filed September 3, 1999, and are related to U.S. utility 

Sj patent applications entitled "License Management System And Method With Multiple License 

p Servers", Attorney Docket No. 230074.0227, filed ; "System And Method For 

" Selecting A Server In A Multiple Server License Management System", Attorney Docket No. 

iS 230074.0229, filed ; and "License Management System And Method For Commuter 

is s 

ill Licensing", Attorney Docket No. 230074.0230, filed . The contents of each of these 

Zl applications are incorporated by reference herein. 

Background of the Invention 

1 . Field of the Invention 
20 The present invention relates, generally, to license management systems and 

processes for managing licenses on a computer network and, in preferred embodiments, to 
such systems and processes involving a pool of license servers for managing software licenses 
among one or more users on the network, and for balancing the management load among the 
servers in the pool. 
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2. Description of Related Art 

The increasing popularity of computer usage in homes and businesses, as well as 
in governmental, research and education institutions, has brought about a world-wide demand 
for greater software variety and sophistication. Indeed, the software development industry in 
5 most industrialized countries has shown substantial growth in recent years and is expected to 
show continued growth through the next decade. 



with such software also tend to increase. Modern software programs can require months or 

even years of development, often involving expensive resources and teams of highly skilled 
10 engineers and programmers, before a product may be readied for sale or license. Thus, 

software development companies are often required to make large investments early in the 
ifj development of their products, in the hope that the products will provide a volume of sales or 
% license revenues sufficient to cover their development investments and generate profits. 
Si Illegal software usage and piracy have become a significant problem to software 

ft! development companies. Because of the nature of computer software, illegal usage and illegal 
1* copying of proprietary software programs can be difficult to detect or deter. The increasing 
fc; usage of computer networks has added to the problem. Computer networks can allow multiple 
ill users to access and copy software stored by a common network program server or copy and 
p pass software between each other, over the network. A legitimately purchased or licensed 
26 copy of a software program available on a network could result in many illegitimate usages or 

copies by unauthorized or unlicensed users having access to the network. 



encrypted software by unauthorized users that do not possess a decryption program or key. 
However, such techniques typically require each authorized users to obtain or be passed a 
25 decryption program or key, in advance of usage of the encrypted program. Accordingly, such 
techniques can be prohibitively inconvenient for some computer and network environments, 
where it is difficult or impractical to supply each authorized user with a decryption program or 
key or to decrypt a program for each user or usage. 



However, as software sophistication increases, development costs associated 



Various forms of encryption techniques have been developed to inhibit usage of 
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Other software protection techniques have required legitimate or authorized 
users to have a special hardware device or circuit installed in or plugged into their computer, 
prior to usage of the protected software. See, e.g., U.S. Patent No. 4,446,519 to Thomas. 
Again, such techniques can be prohibitively inconvenient for some computer and network 
5 environments. For example, if the network environment is such that the authorized user must 
use multiple computers on the network, then each computer must be provided with the special 
hardware device. Moreover, if the environment is such that computers having the special 
hardware device are not located in secure facilities, then unauthorized users may be able to 
access the protected software by using the non-secure computer in which the special hardware 
10 device is installed. 

Accordingly, more sophisticated license management software has been 
% developed for managing software licenses for computer networks, which do not require 
4: encryption of the protected software or special hardware devices in each authorized user's 

"T" 

IS computer. For example, the assignee of the present invention, Rainbow Technologies, Inc., 

k§ has marketed versions of a license management system under the trademark, 

j J SENTINELLM™. The SENTINELLM™ systems operate with a license server connected to a 

£]j network of users. The license server stores and manages software licenses for the network 

m 

|1| users, in accordance with a license management program stored on the server. Each copy of a 
|*% protected software program on the network is accompanied by a program code corresponding 
W to a shell (also known as "wrapper") or library of Application Program Interface (API) 

functions, which communicates with the license management program on the server. When a 
user starts to run the protected software program, the shell code or library of API functions 
provided with the program communicates a request to use a license to the license server, over 
the network. The server, under the control of the license management software, responds to 
25 the request to determine whether it is storing an available license for the protected software 
program. If so, the server communicates an authorization message to the user and decrements 
a count of available licenses stored by the server. If not, the server communicates another 
message to the user, indicating that no licenses are available. In this manner, licenses are 
always stored and managed on a network license server. Each network user may have a copy 
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of a protected software program, but must communicate with the license server for 
authorization to use the protected program. 

License management systems which employ a license server, as discussed 
above, provide significant advantages with respect to the freedom to readily add, delete or 
5 change authorized users on the network, and the ability to readily control and alter licensing 
schemes (for example, to add or delete licenses or change conditions for licenses) by modifying 
only the license server files or programs. However, if all licenses are stored and managed in a 
single license server, failure of that server can result in a failure of the entire license 
management system. Accordingly, prior versions of the SENTINELLM™ systems include 

10 multiple license server capabilities, wherein two or more license servers are provided on the 
network, each having a pre-loaded license file and a license management program. One of the 

T{\ servers may be designated as a primary license server, while the others are designated as 

ST* 

z % backup servers. If the primary server cannot be reached by a user, for example, because the 

-t~ 

IB primary server has crashed or otherwise gone down, the user may then communicate with a 

'si 

i| backup server to obtain an authorization message. The backup server, having a pre-loaded 
] =f copy of the license file and the license management program, may then take over the license 
j-f management functions. 

111 Alternatively, in other prior versions of SENTINELLM™ systems, a shell 

!J1 

p program or library of API functions could be configured to send a general poll to all servers 
20 coupled to the communication channel on which the poll is sent. In response to a general poll, 
any server computer having a license file containing license information corresponding to the 
protected software program (whether or not the license information indicated that a license is 
available) would send a reply to the requesting client computer. The shell program or library 
of API functions associated with the requesting client computer would then respond to the first 
25 reply received from a license server having a license file storing license information for the 
protected software program. If the replying license server contains an available license for the 
protected software program, the replying license server provides an authorization message to 
the requesting client computer. If the replying license server does not contain an available 
license for the protected software program, the replying license server provides a message to 
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the requesting client computer indicating that authorization to run the protected software 
program has not been granted. Such a system provides a degree of protection against system 
failure, in the event that one of the license servers crashes or goes down. The down server 
computer would not respond to the poll, but other server computers having appropriate license 
5 information in their license file would respond to the poll, thus, allowing the client computer to 
continue to seek authorization to run the protected software program, even though one of the 
servers was down. 

While the above SENTINELLM™ systems have operated well in many 
contexts, each license server operates somewhat independent of other license servers. 
10 Accordingly, there is a need in the industry for improvements in connection with management 
and coordination of multiple license servers (or a pool of license servers) in software license 
management systems for computer networks. 

y! Summary of the Disclosure 

Q| Therefore, it is an advantage of embodiments of the present invention to provide 

15 a license management system and method for managing licenses on a network using multiple 
jS{ license servers that allows allocations to be distributed among the license servers and then re- 
\\l assigned between license servers by updating the distribution tables of the license servers to 
□ facilitate a dynamic balancing of allocations among license servers based on actual or expected 
usage. 

20 It is a further advantage of embodiments of the present invention to provide a 

system and method for managing licenses on a network using multiple license servers that 
allows allocations to be re-assigned from a nonfunctional (down) license server to a functioning 
license server by updating the distribution table of the functioning license server to facilitate a 
dynamic balancing of allocations among license servers based on actual or expected usage. 

25 It is a further advantage of embodiments of the present invention to provide a 

system and method for managing licenses on a network using multiple license servers that 
allows a network administrator to change the initial distribution of allocations, add allocations, 
or add license codes for protected software. 
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These and other advantages are accomplished according to a system for 
balancing a distribution of allocations for protected software over a communication network. 
The system is comprised of at least one client computer and a pool of license servers coupled 
to the communication network. The client computers request authorizations to use the 
5 protected software, while a distribution of allocations is managed among the pool of servers for 
tracking and managing available allocations for using the protected software. One license 
server in the pool is designated as the current leader server. When a particular license server 
does not have a selectable minimum amount of available allocations, the current leader server 
re-assigns, where possible, the allocations within the pool by updating the distribution tables of 
10 license servers in the pool, to give at least one additional allocation to the particular license 
server. 

% These and other objects, features, and advantages of embodiments of the 

invention will be apparent to those skilled in the art from the following detailed description of 
Si embodiments of the invention, when read with the drawings and appended claims. 

J§ Brief Description of the Drawings 

S| FIG. 1 is a generalized block diagram representation of an example network 

JJJ environment according to an embodiment of the present invention. 

Q FIG. 2 is a generalized representation of a redundant license file (RLF) for the 

network environment of FIG. 1 according to an embodiment of the present invention. 

20 FIG. 3 is a generalized representation of a license code contained in an RLF of 

FIG. 2 according to an embodiment of the present invention. 

FIG. 4 is a generalized representation of a license code contained in an RLF and 
copied into a license table and a distribution table within a single license server for the network 
environment of FIG. 1 according to an embodiment of the present invention. 

25 FIG. 5 is a generalized representation of an initial state of distribution tables of 

leader server A and follower servers B and C in a server pool comprising three license servers 
according to an embodiment of the present invention. 
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FIG. 6 is a generalized representation of distribution tables of leader server A 
and follower servers B and C in a server pool comprising three license servers in the example 
of FIG. 5 after an authorization has been granted by follower server B according to an 
embodiment of the present invention. 
5 FIG. 7 is a generalized representation of distribution tables of leader server A 

and follower servers B and C in a server pool comprising three license servers in the example 
of FIG. 5 after 28 authorizations have been granted by follower server B according to an 
embodiment of the present invention. 

FIG. 8 is a generalized representation of distribution tables of leader server A 
10 and follower servers B and C in a server pool comprising three license servers in the example 
of FIG. 7 after client computer B has requested an authorization from follower server B, one 
jfl allocation has been re-assigned to follower server B from leader server A, and one allocation 

4; has been re-assigned to follower server B from the free pool according to an embodiment of 

4* 

ffi the present invention. 

si 

hS FIG. 9 is a generalized representation of the distribution tables of license servers 

" A, B and C in a server pool comprising three license servers in the example of FIG. 8, after 
O one additional authorization has been granted by leader server A according to an embodiment 
ll| of the present invention. 

%\ FIG. 10 is a generalized representation of the distribution tables of license 

S§ servers A, B and C in a server pool comprising three license servers in the example of FIG. 9, 
after leader server A has gone down and new leader server B has received information on the 
allocations within all license servers in the server pool according to an embodiment of the 
present invention. 

FIG. 11 is a generalized representation of the distribution tables of license 
25 servers A, B and C in a server pool comprising three license servers in the example of FIG. 
10, after an authorization has been granted to client computer A by new leader server B in 
response to a heartbeat from client computer A in fail-over mode according to an embodiment 
of the present invention. 
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FIG. 12 is a generalized representation of the distribution tables of license 
servers A, B and C in a server pool comprising three license servers in the example of FIG. 
10, after new leader server B has re-assigned an available allocation from old leader server A 
to new leader server B by updating the distribution table of new leader server B according to 
5 an embodiment of the present invention. 

Detailed Description of Preferred Embodiments 

In the following description of preferred embodiments, reference is made to the 
accompanying drawings which form a part hereof, and in which is shown by way of 
illustration specific embodiments in which the invention may be practiced. It is to be 
]=Q understood that other embodiments may be utilized and structural changes may be made 
15 without departing from the scope of the preferred embodiments of the present invention. 
8 f* Preferred embodiments of the invention relate to a system and process involving 

G a pool of license servers for managing licenses to, for example, one or more protected software 
!i( programs, files or other data structures, among one or more users on the network. Protected 
•15 software may include, but is not limited to, for example, a software program, such as a word- 

IZi 

m processing program, a graphics program, a computer game, etc., a proprietary file or other 
j*5 data structure, such as a data-base or other form of data, as well as other software encoded 
|5 information or instructions, for which the control of user access is desired. For purposes of 

simplifying the present disclosure, the protected software used in the following examples is one 
20 or more proprietary software programs. 

According to a preferred embodiment of the present invention, the plurality of 
license servers are managed in accordance with a server pool scheme, as controlled by a 
license management program associated with each license server computer and the shell 
program or library of API functions associated with each copy of the protected software 
25 program. In preferred embodiments, the pool of license servers comprises three to 11 servers. 
However, it should be noted that alternative embodiments of the present invention are not 
limited to any particular maximum number of license servers. In addition, in further 
alternative embodiments, multiple pools of license servers can reside on a single network. 
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However, for purposes of illustration only, embodiments of the present invention will be 

described herein with reference to a pool of three license servers. 

An example hardware environment for an embodiment of the present invention 

is illustrated, generally, in FIG. 1. With reference to FIG. 1, a computer network 10 includes 
5 a plurality of user or client computers 12 and three license servers 14, each coupled for 

communication over a communication network link, generally referenced at 16. The plurality 

of client computers 12 are identified as "Client 1", "Client 2", and "Client N", and the 

plurality of license servers 14 are labeled as "Lie. Server A", "Lie. Server B", and "Lie. 

Server C." Embodiments may employ any suitable number of client computers 12 and any 
10 suitable number of license servers 14. Also, while not shown in FIG. 1, the network 10 may 

include additional components, including one or more program or file servers, routers and/or 
"Zi other well known network devices and resources. 

P Each client computer 12 preferably includes a suitable processor and associated 

m transient memory, such as an RAM, for running a protected software program. The client 
£| computer may be part of a standard personal computer (PC), network terminal, workstation or 
^ the like. In one preferred embodiment, each client computer 12 is coupled to a persistent 
□ program storage memory device 18, which may include, but is not limited to, a hard disc 
Y\\ drive, floppy disc drive, tape drive, CD-ROM or the like, having a computer readable medium 
z} on which the protected software program is stored. Also stored as part of the protected 
2© software program is additional program code, such as code corresponding to a shell or library 
of API functions as discussed above, for communicating with the server computers which are 
under control of a license management program, in accordance with communication functions 
discussed below. 

Each license server 14 preferably includes a suitable processor and associated 
25 transient memory, such as an RAM, for running a license management program as described 
herein. In addition, each license server 14 is coupled to one or more persistent program 
storage memory devices 20, which may include, but is not limited to, a hard disc drive, floppy 
disc drive, tape drive, CD-ROM or the like, having a computer readable medium on which a 
license management program 22 and a redundant license file (RLF) 24 are stored. 
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An example embodiment of an RLF 24 is shown in FIG. 2 as containing license 
codes 26 for proprietary software programs A, B, C, etc. Each license code 26, in one 
example embodiment, comprises a string of data relating to license policy and the software 
program to which the license policy applies. In preferred embodiments, license codes 26 for 
5 software produced by more than one vendor may reside within the same RLF 24 of the same 
license server 14, and may be managed with a single process (execution of the license 
management software) running on a single license server 14. Thus, any given licenser server 
14 does not need to have multiple license management processes running to manage licenses 
for multiple protected vendor applications. Instead, only one license management program 

10 needs to be running on a given license server 14, to manage licenses for protected vendor 
applications managed by that license server. 

""J In the example embodiment of FIG. 3, a license code 26 comprises a data string 

4 J defining multiple records or fields Rl, R2, R3 ... RN, wherein each record corresponds to an 
IH attribute associated with the license policy, the software program to which the license policy 

11 applies, or other information. In preferred embodiments, each license code 26 includes at least 
lts * one attribute associated with a license policy, the number of allocations for using the protected 
Q software program, and at least one other attribute associated with the identity of the protected 

IJ.J 

il ] software program. The number of allocations for using the protected software program is the 
maximum number of users that can be running the protected software program at any one time, 

i— j 

2® and is also referred to as the ceiling or hard limit. Data associated with a license policy 

preferably includes data representing the expiration date or expiration time of the license, as 
granted by the licensee (e.g., the protected software program's owner or developer). 

For purposes of illustration only, in the example of FIG. 4 only one fictional 
license code 26, identified as "Application vl.0," is stored in the RLF 24 of a license server 

25 14, with a hard limit of 100 total allocations distributable across all license servers 14 (see 
reference character 28). In preferred embodiments, another attribute of the RLF 24 is the IP 
address 32 for each license server 26. Another attribute of the RLF 24 is the distribution of 
the 100 allocations across all the license servers 14. This distribution is identified as the initial 
distribution 30, and is configurable by the network administrator. In the example of FIG. 4, 



015.405244.6 




PATENT 
Docket No: 230074.0228 



- 11 - 



an initial distribution 30 of A:39, B:30, C:30, indicates that 39 allocations will initially be 
assigned to license server A, 30 allocations will initially be assigned to license server B, and 
30 allocations will initially be assigned to license server C. This initial distribution 30 also 
signifies that the pool will comprise three license servers. 
5 In preferred embodiments of the present invention, each RLF 24 stored in each 

license server 14 is an exact copy of every other RLF 24 of license servers in the pool. Thus, 
attributes of the license code 26 such as the expiration date or number of allocations need not 
be passed between license servers 14 in response to a request for authorization to used a 
protected software program from a client computer 12, because an exact copy of the license 
10 code 26 has already been stored on the hard disk of each license server 14 prior to the startup 

of that license server 14. 
y Each license server 14 operates, under the control of its associated license 

management program 22, to perform license management functions in association with data 
0| contained in the RLF 24, as described herein. Thus, when a particular license server 14 is 
jj| started, the license server 14 loads the contents of its RLF 24 into a license table 34 in RAM or 
O other memory and reads the license table 34, which identifies that server as a license server 14. 
□ It should be noted that in preferred embodiments, the license table 34 is never modified. In 
j?I addition, the contents of the RLF 24 is loaded into a distribution table 36 in RAM or other 
Jif memory, and the initial distribution 30 is further copied into another record, distinct from the 
2© license code 26, identified as a current distribution 40. Unlike the license table 34, the 
distribution table 36 changes its current distribution 40 over time, to keep track of current 
allocations. 

It should be noted that in the example of FIG. 4, only 99 of the 100 allocations 
have been initially assigned by the network administrator. If the network administrator makes 
25 an initial distribution that does not equal the hard limit of allocations (see reference character 
28), in preferred embodiments of the present invention the extra allocations will be put into a 
free pool 48 maintained within the distribution table 36. Thus, in the example of FIG. 4, one 
allocation is put into free pool 48. If, on the other hand, the network administrator makes no 
initial distribution 30 of allocations in the RLF 24, preferred embodiments will divide the 
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allocations evenly over the number of servers in the pool, and any extras will be put in the free 
pool 48. For example (but not illustrated in FIG. 4), if no initial distribution 30 was assigned 
by the network administrator, information representing an even distribution of A: 33, B:33, and 
C:33 would be stored in the initial distribution attribute 30 of the RLF 24, and when a 
5 particular license server 14 is started, the RLF 24 would load an even distribution of A:33, 
B:33, and C:33 into the current distribution attribute 40 of distribution table 36, and would 
load a value of one into the free pool 48. 



distribution tables 36 for a three server pool consisting of license servers A, B, and C. 
10 Assume, for this illustration, that all three license servers have been started up, and that license 

server A has been designated as the leader server, and B and C as the follower servers. 
Hi Further assume that the hard limit of allocations for the software program Application vl.O is 

100, as indicated by the hard limit record 28 associated with the license code 26 for 
tti Application vl.O within each distribution table 36. In addition, assume that the current 
ft! distribution of allocations is 39 on leader server A, 30 on follower server B, 30 on follower 



server C, and one in the free pool, as indicated in the current distribution record 40 and the 
free pool 48 associated with the license code 26 for Application vl.O within each distribution 
table 36. 



26 is a record for available allocations for each server in the pool (see reference character 38), 
a record for available allocations for all servers in the pool (see reference character 44), and a 
record for allocations currently in use for each server in the pool (see reference character 42). 
The allocations in these records are values which are incremented or decremented as 
authorizations are issued, returned, or borrowed. It should be understood that the records 
25 identified by reference characters 28, 38, 40, 42, and 44 in FIG. 5 are associated with a 
particular license code 26, but are distinct from it. 



structure of the distribution tables 36 will be the same for both the leader server A and 
follower servers B and C, but only the distribution table 36 for leader server A (the leader 



For purposes of illustration only, FIG. 5 illustrates an example of the 



Note also that in the embodiment of FIG. 5, associated with each license code 



As indicated in FIG. 5, in preferred embodiments of the present invention, the 
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distribution table) will reflect the allocation status of the other license servers 14 in the server 
pool. In contrast, the distribution tables 36 for follower servers B and C (the follower 
distribution tables) will only reflect the allocation status of that particular follower server, as 
indicated by the X (don't care) designations in portions of the follower distribution tables. 
5 When a user at a client computer 12 desires to run Application vl.O from a 

follower server, such as follower server B, for example, the client computer 12 may first load 
some or all of the protected program into the transient memory of the client computer 12, 
along with the program code corresponding to a shell or library of API functions. 
Alternatively, the protected program may remain in persistent memory 18 until and unless the 
10 server computer communicates an authorization signal to the shell program or library of API 

functions. Selection of a follower server from which to request authorization is described in a 
j~l related U.S. utility application entitled "System and Method for Selecting a Server in a 
%l Multiple Server License Management System," attorney docket no. 230074/0229, filed 

SI , the contents of which are incorporated by reference herein. Alternatively, the 

ftl protected program may remain in persistent memory 18 until and unless the server computer 
]** communicates an authorization signal to the shell program or library of API functions. 
|*f Loading of the shell program or library of API functions is preferably transparent to the user 
III on the client computer 12 and, preferably, occurs in response to the user inputting a command 
n to open the protected software (for example, by clicking a mouse button on an icon associated 
§6 with the protected software). 

As part of the function of the shell or library of API functions, a request is then 
sent from the client computer 12 to follower server B for one or more authorizations to run the 
protected program. For purposes of this example, assume that client computer 12 requested 
only one authorization. Follower server B, under the control of the license management 
25 software, responds to the request by looking at its distribution table 36 to determine whether it 
has available allocations for Application vl.O. In the example of FIG. 5, follower server B has 
30 allocations available, as represented by the available allocations record for each server in 
the pool (reference character 38) in the distribution table 36 for follower server B. Because it 
has available allocations, follower server B communicates an authorization message to the 
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client computer 12. As illustrated in FIG. 6, once the authorization message is sent, the 
distribution table 36 is updated so that the available allocations record 38 for follower server B 
decreases to 29, and the allocations in use record 42 for follower server B increases to one. 

As noted above, in preferred embodiments of the present invention the leader 
5 server always has a global picture of the distribution of allocations in the whole server pool. 
Thus, in the present example any changes to the distribution table of follower server B must be 
communicated to leader server A. In preferred embodiments, follower server B can determine 
the IP address for the leader server A from a leader priority list 46, which is configurable by 
the network administrator. It should be noted that in preferred embodiments, the IP address of 
10 all license servers 14 in the server pool are stored in the leader priority list 46, a data structure 
separate from the license codes 26, to facilitate faster lookup. However, in alternative 

.'==. 

embodiments the IP addresses may be stored in a record associated with the license codes 26. 
In any case, after determining the IP address of the leader server A, follower server B 
communicates the fact that its available allocations count has dropped to 29 to leader server A, 
and the distribution table of leader server A will be updated accordingly. Thus, as illustrated 
in FIG. 6, the distribution table 36 of leader server A reflects that the available allocations 
record 38 for follower server B has dropped to 29, the allocations in use record 42 for follower 
111 server B has increased to 1 , and that the record for allocations available for all servers in the 
5=j pool (see reference character 44) has dropped to 99. 

Dynamic license balancing will be described next according to embodiments of 
the present invention. In preferred embodiments, license server 14 stores a value for a 
borrowing threshold that can be set, for example, by the network administrator. 
Fundamentally, the borrowing threshold is an indicator that the number of available allocations 
for a particular protected software program assigned to a particular license server 14 has 
25 reached an unacceptably low level. The network administrator can independently set the 

borrowing threshold for each license server 14 such that borrowing, or license balancing, may 
be enabled when a certain percentage of the allocations assigned to a particular license server 
14 are in use. In preferred embodiments of the present invention the borrowing threshold can 
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be set to a value of between 1 % and 90%. However, in alternative embodiments, the 
borrowing threshold can be set to as high as 100%. 

Generally, any time the borrowing threshold is exceeded, a borrow request to 
the leader server will be initiated. Xontinuing the example of FIG. 6 for purposes of 
5 illustration only, assume that the borrowing threshold has been set to 90%, and a cluster of 
client computers 12 have requested 27 more authorizations for Application vl.O from follower 
server B. As illustrated in FIG. 7, once the authorization messages have been sent by follower 
server B, the available allocations record 38 for follower server B decreases to two, and the 
allocations in use record 42 for follower server B increases to 28. This change is then 
10 communicated to leader server A, whose distribution table 36 will reflect that the available 
allocations record 38 for follower server B has decreased to two, the allocations in use record 
42 for follower server B has increased to 28, and that the record for allocations available for 
IJl all servers in the pool (see reference character 44) has decreased to 72. It should be noted in 
£} FIG. 7 that the distribution tables 36 for follower servers B and C keep track of changes to 
£$ their own allocations, but do not keep track of changes to the allocations of other license 

servers. At this point in time, greater than 90% of the allocations for follower server B are in 
§:| use. Because the borrowing threshold of 90% has been exceeded, follower server B will then 

initiate a borrow request. 
^ In preferred embodiments of the present invention, borrowing always occurs 

W through the leader server because the leader server always maintains a complete picture of the 
current distribution of allocations within the server pool. However, before a borrow request 
can be processed, the number of allocations to be borrowed must be determined. In preferred 
embodiments, the number of allocations to be borrowed is dependent on (1) the number of 
allocations needed to drop below the borrowing threshold, and (2) the borrowing threshold 
25 itself. Generally, the number of allocations to be borrowed is equivalent to the number of 
allocations needed to drop below the borrowing threshold, plus a number of extra allocations 
inversely related to the borrowing threshold. If the borrowing threshold is generally lower, it 
may be exceeded more frequently, and thus the number of extra allocations is set higher. If 
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the borrowing threshold is generally higher, it may be exceeded less frequently, and thus the 
number of extra allocations is set lower. 



allocations in use, two available allocations are needed to drop below the borrowing threshold. 
5 (If only one available allocation was borrowed, for a total allocation of 31, then 28 + 31 = 
90.3 % , which still exceeds the borrowing threshold of 90% . However, if two available 
allocations are borrowed, for a total allocation of 32, then 28 + 32 = 87.5%, and the 
borrowing threshold is not exceeded.) Moreover, because the borrowing threshold of 90% is 
relatively high and may be exceeded less frequently, no extra allocations will be borrowed. 
10 Thus, in the example of FIG. 7, assume that a total of two allocations will be borrowed. 



preferred embodiments of the present invention leader server A looks within its own memory - 
%l - first at the free pool 48, then to the allocation of any down license servers, and finally to its 

own current allocation - to locate an available allocation. However, in alternative 
If embodiments, other sequences may be employed. In the example of FIG. 7, leader server A 
™ will determine that one allocation is available from the free pool 48, no license servers 14 are 
y down, and that one allocation is available from the current allocation of leader server A. 
ry Leader server A will then borrow (re-assign) one allocation each from free pool 48 and leader 
n server A to follower server B. 

20 As illustrated in FIG. 8, after the borrowing has occurred, the distribution table 

36 for leader server A will reflect the re-assignment of allocations caused by the borrowing. 
In the distribution table for leader server A, the current distribution 40 of leader server A has 
changed to A: 38, B:32, C:30, the available allocations record 38 for follower server B has 
increased to four, and the free pool 48 for leader server A has decreased to zero. 

25 In preferred embodiments of the present invention, after the distribution table 36 

for leader server A has been updated, leader server A sends a distribution criteria sync 
message to follower servers B and C to change their distribution tables 36. As illustrated in 
FIG. 8, after the distribution criteria sync message has been received by follower servers B and 
C, the distribution table 36 for follower server B reflects the new current distribution 40 of 



In the example of FIG. 7, follower server B will determine that, with 28 



When leader server A receives the borrow request from follower server B, in 
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A:38, B:32, C:30, and a new available allocations record 38 of four. The distribution table 36 
for follower server C also reflects the new current distribution 40 of A: 38, B: 32, C: 30. It 
should be noted that even though a successful borrow request will change the assignment of 
allocations within the server pool, the initial distribution 30 in the RLFs 24 and license tables 
5 34 (see FIG. 4) do not change. 



one allocation each from free pool 48 and leader server A to follower server B. However, if 
an insufficient number of available allocations were available from free pool 48 and leader 
server A, leader server A will send a borrow request to follower server C on behalf of 
10 follower server B, while saving the original borrow request from follower server B. If 

follower server C has available allocations, leader server A will decrement the number of 
% allocations in follower server C by the appropriate amount, and increment the number of 
l il allocations in follower server B by the same amount. After the distribution table 36 for leader 
III server A is updated, leader server A will send a distribution criteria sync message to follower 
0 servers B and C to change their distribution tables 36. However, if follower server C does not 
have a sufficient number of available allocations, it will decline the borrow request from leader 
P server A. Leader server A will then send a borrow response back to follower server B, 
ill indicating that no authorizations could be granted. 



actually been re-assigned, a new request from another client computer for one or more 
authorizations may be received. In preferred embodiments of the present invention, the 
affected server will examine its distribution table, and even though the borrowing threshold is 
currently exceeded, will grant authorizations to the requesting client computer if there are 
25 enough allocations available to satisfy the entire request. However, if there are an insufficient 
number of available allocations to satisfy the entire request, the affected server will send a 
denial message back to the requesting client computer. 



allocations in the distribution tables 36 of the license servers 14 as a result of a borrow request 



In the example of FIG. 7, the leader server A was able to borrow (re-assign) 



%l Because the borrowing process may take a relatively long time, it is possible 

§6 that while a server is in the process of borrowing allocations, but before any allocations have 



In preferred embodiments of the present invention, because the re-assignment of 
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is not reversed when the re-assignment of allocations is no longer needed, borrowing has the 
result of dynamically altering the distribution of allocations for each license server 14 in the 
server pool. Thus, license servers 14 that receive a large number of requests for authorizations 
may eventually accumulate a large number of allocations as compared to license servers 14 that 
5 receive fewer requests. In this way, the current distribution of allocations may, over time, 
settle into a distribution that is optimized for the utilization of the specific network. 



borrowing, the distribution of allocations may also be changed by the network administrator. 

Although the RLF 24 contains the initial distribution 30, a network administrator may later 
10 decide to change the current distribution 40. Preferred embodiments of the present invention 

provide a utility, triggered by a change distribution criteria message, that enables a leader 
.'f I server to make changes to the current distribution 40 of allocations for the pool of license 
z: servers. 



distribution criteria message including a new current distribution 40 to follower server B, 
follower server B will pass this message to leader server A along with the new current 
distribution 40. As this example illustrates, in preferred embodiments all change distribution 
criteria messages, if not initially sent to the leader server, must be forwarded to the leader 



server A will then change its current distribution record 40 in its distribution table 36 and send 
25 a distribution criteria sync message to follower servers B and C. Again, it should be noted that 
a change distribution criteria message will only change the current distribution 40 of the server 
pool, not the RLFs 24. An advantage of this utility is that a network administrator can use any 
license server 14 to make the change. 



However, in addition to the re-assignment of allocations as a result of 



flj Using the example three server pool discussed in FIGs. 5-8 for purposes of 

ftJ illustration only, if the network administrator, using a client computer 12, sends a change 



§0 server so that the leader server always has a global picture of the current distribution of 
allocations 40 in the server pool. In addition, follower server B will send a "message 
forwarded to leader server" message back to client computer 12. 

Once leader server A receives a change distribution criteria message, leader 
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In the case where the network administrator uses a client computer to send a 
change distribution criteria message directly to the leader server, after the leader server 
changes the distribution table and a distribution criteria sync message has been sent to the 
follower servers in the pool, the leader server will send a message back to the client computer 
5 indicating that the distribution criteria has changed. 

In addition to changing the current distribution of allocations in the server pool, 
in embodiments of the present invention allocations can also be added to the server pool by the 
network administrator. Through a client computer, for example, the network administrator 
can run a utility that requests the addition of allocations to an existing license code by adding a 
10 "new" license code. The overall hard limit of the existing license code is thereby increased by 
the hard limit of the new license code. The new license code should accompany a distribution 
criteria specifying a desired allocation for each server in the pool. If no distribution criteria is 
u§ specified, the allocation is equally divided among the servers in the pool, with any remainder 
m being placed in the free pool. 

fiS If the add allocations message is directed to a follower server, the follower 

lssl server will forward the message to the leader server. Thus, an advantage of this utility is that 
O a network administrator can use any license server to make the change. Once the leader server 
n= receives an add allocations message, the leader server will then change its hard limit of 
Jif allocations record for the proper license code in its distribution table and send a distribution 
ISO) criteria sync message to the follower servers. Once the hard limit of allocations record has 
been changed in all license servers, the leader server will send a message back to the client 
computer through the follower server (but only if the add allocations message was initially sent 
to the follower server) indicating that the hard limit of allocations has been changed. Again, it 
should be noted that an add allocations message will only change the hard limit of allocations 
25 in the server pool, not the RLFs. 

In embodiments of the present invention a new license code 26 can be added to 
the server pool by the network administrator. Through a client, the network administrator can 
run a utility that requests the addition of a new license code 26 to a particular license server. 
Using the example three server pool discussed in FIGs. 5-8 for purposes of illustration only, if 
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the network administrator, using a client computer 12, sends an add license code message to 
follower server B, follower server B will pass this message to leader server A along with the 
new license code 26. As this example illustrates, in preferred embodiments all add license 
code messages, if not initially sent to the leader server, must be forwarded to the leader server 
5 so that the leader server always has a global picture of the license codes 26 in the server pool. 

Once leader server A receives an add license code message, leader server A will 
then add the license code 26 to its distribution table 36 and send a distribution criteria sync 
message to follower servers B and C. Once the license code 26 has been added to the 
distribution table 36 of all license servers 14, leader server A sends a message back to the 

10 client computer 12 through follower server B (only if the add license code message was 

initially sent to follower server B) indicating that the license code has been added. Again, it 

^ should be noted that an add license code message will only add the license code 26 to the 

distribution tables 36 of license servers 14 in the server pool, not the RLFs 24. In addition, an 

llj add allocations message must be separately sent to add allocations to the new license code 26. 

fe| An advantage of this utility is that a network administrator can use any license server 14 to 

*** make the change. 

O It should be noted that the discussion hereinabove has been limited to redundant 

|i| license codes 26, which are defined herein as license codes 26 having allocations that may be 
re-assigned to any license server 14 in the server pool. However, in preferred embodiments of 

W the present invention, it is also possible to add non-redundant license codes, which are defined 
herein as license codes that can be run only on a particular server. Thus, one attribute of a 
license code 26 is whether it is non-redundant. If an add license code message for a non- 
redundant license code for follower server B is sent to follower server B, for example, the 
distribution table 36 of follower server B would be updated, but the change would not be 

25 forwarded to leader server A. Thus, leader server A would have no knowledge of the 
existence of the non-redundant license code. 

To successfully receive an authorization message to run a program licensed 
under a non-redundant license code 26 in follower server B, a client computer 12 must request 
the authorization from follower server B. No other license server 14, including the leader 
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server A, will know of the existence of the non-redundant license code 26. Thus, if a request 
is made to leader server A or follower server C for the non-redundant license code 26 in 
follower server B, a denial will be sent back to the client computer 12. No borrow request 
will be initiated. In addition, if follower server B goes down, the allocations for this non- 
5 redundant license code will not be re-assigned to follower server C or leader server A. 

Dynamic license balancing after a license server 14 has gone down will be 
described next according to embodiments of the present invention. Continuing the example of 
FIG. 8 for purposes of illustration only, assume that a client computer A has requested 
authorization to use a protected software program and has received an authorization message 

10 from leader server A, so that the distribution tables 36 for the three license servers 14 are as 
illustrated in FIG. 9. In embodiments of the present invention, the license servers 14 

*~ periodically communicate with (ping) each other so that license servers 14 know which other 
license servers 14 are down or up. The communication, or pinging, may be in the form of a 

Pi periodic signal (heartbeat) sent from the follower servers to the leader server. 

0 Now assume that leader server A goes down. Because all license servers 14 are 

periodically pinging each other, the two follower servers B and C will soon determine that 

i3 leader server A has gone down. An election process is then triggered, and a new leader server 

Si 

ill is elected from among the functioning follower servers. Election of a new leader server is 
jLj described in a related U.S. utility application entitled "System and Method for Selecting a 
K) Server in a Multiple Server License Management System," attorney docket no. 230074/0229, 
filed , the contents of which are incorporated by reference herein. 

New leader server B will already have its own RLF 24, license table 34, and 
distribution table 36, which includes the current distribution of allocations 40. However, new 
leader server B does not have the global allocation information maintained by the old leader 
25 server A. Therefore, upon becoming the new leader server, license server B must now receive 
this information from the other license servers. As illustrated in FIG. 10, because license 
server A is now down, within the distribution table 36 for new leader server B, the allocations 
in use record for license server A (see reference character 42) is set to zero, and the allocations 
available record (see reference character 38) is set to 38. When new leader server B sends a 
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heartbeat to follower server C, the heartbeat contains information which identifies B as the 
leader server. Follower server C will send an "ack" in response to the heartbeat from new 
leader server B, and in the process, will provide information on the allocations in use record 
and the allocations available record for follower server C. Once this information is received, 
5 within the distribution table 36 for new leader server B, the allocations in use record for 

license server C (see reference character 42) is set to zero, and the allocations available record 
(see reference character 38) is set to 30. In addition, the record for allocations available for all 
servers in the pool (see reference character 44) is set to 72. In this manner, new leader server 
B receives a global picture of the status of all license servers in the server pool. 
10 Meanwhile, because of the periodic communication, or pinging, between client 

computers 12 connected to a particular license server 14 and that particular license server 14, 
|f i client computer A will soon determine that leader server A went down. Client computer A 
l tl knows that it has received authorization to run a protected program from leader server A, and 
ffi therefore knows that it must enter a fail-over mode and look for a new license server 14 from 
jtj which to receive authorization. Because client computer A receives leader priority list 46 from 
? " a license server 14 whenever client computer A receives an authorization, client computer A 
y knows the IP address of every license server 14 in the server pool. Client computer A then 
|1J sends a heartbeat to the remaining license servers 14 in turn, in the order designated in leader 
pi priority list 46, until it finds a server with an available allocation. 
SI) In preferred embodiments of the present invention, each license server 14 

maintains a key table containing a list of all client computers 12 that currently have 
authorizations issued by that license server 14, even for non-redundant license codes. Thus, 
when new leader server B receives a heartbeat from client computer A, new leader server B 
will determine from the key table that it did not previously issue an authorization message for 
25 client computer A. Thus, new leader server B will convert the heartbeat to a request, and will 
issue a new authorization message for client computer A, provided it has an available 
allocation. In this manner, as client computers 12 formerly connected to old leader server A 
locate and ping new leader server B, new leader server B will issue authorization messages and 
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adjust its distribution table 36 to include allocations previously managed by old leader server 
A. The distribution table 36 of new leader server B will then change accordingly. 

However, if client computer A, in fail-over mode, sends a heartbeat to new 
leader server B, but new leader server B doesn't have an available allocation, new leader 
5 server B will first look for an available allocation in the free pool 48, and then in the available 
allocation record for old leader server A. However, in alternative embodiments, other 
sequences may be employed. New leader server B can determine the available allocation 
record of old leader server A from its own distribution table 36. If an available allocation is 
located in either of these sources, the available allocation is re-assigned to new leader server B, 
10 and the distribution tables 36 of new leader server B and follower server C are updated 
accordingly. 

1% An example of fail-over will now be presented. Continuing the example of FIG. 

4: 10 presented herein for purposes of illustration only, assume that client computer A, in fail- 
Sl over mode, sends a heartbeat to new leader server B. Because new leader server B has four 
f!| allocations available, new leader server B will issue an authorization to client computer A. 

The distribution table 36 of new leader server B will then be modified as shown in FIG. 11, 
□ where the record for allocations available for all servers in the pool (see reference character 
fy 44) is decreased to 71, the allocations in use record for new leader server B (see reference 
%l character 42) is increased to 29, and the allocations available record for new leader server B 
SI) (see reference character 38) is decreased to three. 

Thereafter, because the borrowing threshold has now been exceeded (29 -s- 32 = 
90.6%), new leader server B will attempt to borrow allocations from other sources. New 
leader server B therefore first looks for an available allocation in the free pool 48, but no 
available allocations are in the free pool 48. New leader server then looks for an available 
25 allocation in the available allocation record for old leader server A, and finds that 38 

allocations are available. An allocation is then re-assigned from old leader server A to new 
leader server B, resulting in the distribution tables 36 within new leader server B and follower 
server C as illustrated in FIG. 12. It should be noted that in preferred embodiments, new 
leader server B does not immediately update its distribution table 36 and re-assign all of the 
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allocations from old leader server A to new leader server B. Rather, allocations are re- 
assigned as needed. This is advantageous, because if old leader server A should come back 
up, it will receive whatever allocation remained in old leader server A from the distribution 
. table 36 of new leader server B. If new leader server B immediately took all allocations from 
5 old leader server A, then old leader server A would receive no allocations when it came back 
up. 

In preferred embodiments of the present invention, if no available allocations 
are found in the free pool 48 or the allocation of old leader server A, new leader server B will 
attempt to borrow an allocation from follower server C. If follower server C has an available 

10 allocation, the distribution tables 36 in follower server C and new leader server B are updated 
so that the available allocation is re-assigned to new leader server B. An advantage of re- 

hi assigning allocations from the old leader server A, if possible, before re-assigning allocations 

£J from follower server C, is that because follower server C is still up and working, it can send 
authorization messages to other client computers 12 that request authorization directly from 

33 follower server C, provided follower server C has available allocations. In contrast, the 

f ^ 

u allocations of old leader server A will go unused unless the allocations of old leader server A 
13 are re-assigned. It should be noted that in alternative embodiments, borrowing is a utility that 
ill can be turned on or off by the network administrator. 

:1; Therefore, embodiments of the present invention provide a system and method 

IS for managing licenses on a network using multiple license servers that allows allocations to be 
distributed among the license servers and then re-assigned between license servers by updating 
the distribution tables of the license servers to facilitate a dynamic balancing of allocations 
among license servers that is based on actual usage. Embodiments of the present invention 
also allow allocations to be re-assigned from a nonfunctional (down) license server to a 
25 functioning license server to facilitate a dynamic balancing of allocations among license servers 
that is based on actual usage, and allow a network administrator to change the initial 
distribution of allocations, add allocations, or add license codes for protected software. 
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